Feeds

Patient info ends up on eBay

NHS trust hard drives at knock-down prices

Bridging the IT gap between rising business demands and ageing tools

The Dudley Group of Hospitals NHS Trust is trying to find out how one of its computers full of confidential medical information was sold on eBay.

Disposal of the DGoH's computers is carried out under contract to Siemens Medical Solutions, as part of a PFI agreement. Computer Disposals has a sub-contract with Siemens to dispose of obsolete IT. All hard drives that leave the trust via this route should undergo data wiping, which meets the government's standard of being over-written three times.

The confidential data was discovered by researchers working on forensic data recovery methods at Glamorgan University. The university's research is sponsored by BT, which purchases 250 hard drives a year from places such as eBay and regional computer fairs. It then passes these to the university, which attempts to recover data.

The research is designed to raise awareness in organisations of how easy it is to recover sensitive data where poor data wiping processes are used.

The trust said that, together with Siemens, it has carried out an internal investigation into the incident and developed recommendations to prevent data from being left on unwanted hard drives.

"Unfortunately, an investigation into how this particular hard drive has been openly purchased has not been able to identify the route at this stage, and the trust is continuing with its efforts to identify the source, including the possibility of theft," the trust said in a statement to GC News .

They include a change to the contract between the trust and Siemens about responsibility for the disposal of all IT equipment and the purchase of a degausser to ensure that hard drives are wiped before they leave the trust.

The trust board is expected to accept the recommendations when it meets later this month.

This summer, a report from the Information Commissioner's Office highlighted a "horrifying" number of public sector organisations that were guilty of careless breaches of personal information. It received almost 24,000 complaints concerning personal information over the last year.

In one high-profile breach, an online recruitment system for junior doctors revealed highly personal information on application forms, including sexuality and religion.

This article was originally published at Kablenet.

Kablenet's GC weekly is a free email newsletter covering the latest news and analysis of public sector technology. To register click here.

Boost IT visibility and business value

More from The Register

next story
UK.gov's Open Source switch WON'T get rid of Microsoft, y'know
What do you mean, we've ditched Redmond in favour of IBM?!
UK government officially adopts Open Document Format
Microsoft insurgency fails, earns snarky remark from UK digital services head
Major problems beset UK ISP filth filters: But it's OK, nobody uses them
It's almost as though pr0n was actually rather popular
US Social Security 'wasted $300 million on an IT BOONDOGGLE'
Scrutiny committee bods probe derailed database project
HP, Microsoft prove it again: Big Business doesn't create jobs
SMEs get lip service - what they need is dinner at the Club
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
Arrr: Freetard-bothering Digital Economy Act tied up, thrown in the hold
Ministry of Fun confirms: Yes, we're busy doing nothing
Australia floats website blocks and ISP liability to stop copyright thieves
Big Content could get the right to order ISPs to stop traffic
Help yourself to anyone's photos FOR FREE, suggests UK.gov
Copyright law reforms will keep m'learned friends busy
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.